Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0F47BADC8DFE11EDBDADC6E0F1222468.roa
File: 0F47BADC8DFE11EDBDADC6E0F1222468.roa (raw, json)
Hash identifier: iYaJbCeBP2IElTYqwn/AzKoYFcH0s+cbk2kIyWUwDtA=
Subject key identifier: 38:8D:66:FD:6D:72:C1:BD:2B:8F:3D:7F:93:9D:50:28:8F:16:1E:E1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09B7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0F47BADC8DFE11EDBDADC6E0F1222468.roa
Signing time: Fri 06 Jan 2023 20:09:44 +0000
ROA not before: Fri 06 Jan 2023 20:09:40 +0000
ROA not after: Sat 06 Jan 2024 20:09:40 +0000
asID: 7018
IP address blocks: 102.129.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 6 20:09:40 2023 GMT
Not After : Jan 6 20:09:40 2024 GMT
Subject: CN=63b88008-7b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:c3:bb:96:15:47:a1:3a:9f:80:05:0b:50:
82:9d:76:50:19:35:1b:3a:cb:1d:3f:2b:fd:1d:c6:
87:c3:64:d6:61:09:6e:b5:4c:35:4a:29:ec:0a:6c:
f1:1d:28:63:c5:c6:29:25:48:be:df:b8:ce:e3:d4:
ec:3f:84:97:5a:e1:75:cc:8a:ab:b9:bb:00:b0:64:
fa:b5:11:f5:fe:1d:21:f7:d2:ac:3e:d0:4e:a0:40:
fb:db:8d:9b:c5:4b:76:6d:2d:4c:9e:b9:e0:35:c6:
ee:98:01:80:81:95:38:a0:84:4f:99:e6:2d:c2:56:
37:04:7f:c9:7e:43:61:c9:20:5f:5f:24:ef:31:0e:
c1:1f:d9:43:b9:b8:55:9c:61:a5:11:f2:41:7c:d8:
f5:6c:1c:1a:62:16:4d:18:65:f9:01:1b:fe:33:a5:
f8:8b:62:53:8a:c3:ef:88:2d:c2:ea:4f:68:71:4c:
a1:3a:22:e4:11:3a:fe:64:41:5e:b4:2d:64:bf:3c:
c1:44:9a:c4:e4:d5:39:fd:1e:2d:e1:d4:88:d4:b8:
f5:e5:4d:ce:62:12:7b:db:81:55:9d:2b:59:d7:d5:
bb:0f:82:f1:d6:b0:9b:c7:67:ec:95:ce:02:1d:25:
1d:37:4a:69:d3:bd:78:aa:1e:69:ab:3e:ec:d8:f7:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8D:66:FD:6D:72:C1:BD:2B:8F:3D:7F:93:9D:50:28:8F:16:1E:E1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0F47BADC8DFE11EDBDADC6E0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.176.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b5:a2:dc:f9:7e:a6:dd:08:db:e1:af:41:ed:2e:b7:f1:58:
1d:ca:30:74:54:34:42:0d:3d:ab:8d:89:87:80:1e:67:e2:2c:
17:c7:30:d6:2f:8b:a4:e9:96:0c:38:58:fd:d4:dc:1c:eb:80:
29:88:53:e0:1a:31:2b:ef:7f:df:90:b2:3e:bf:64:aa:e2:ff:
04:e6:83:88:84:0a:e2:00:c4:4b:1a:6f:dd:b1:c0:ca:13:2e:
d1:e0:20:ba:a5:18:23:c1:0d:50:82:5d:7d:88:39:42:1f:ec:
c3:33:b1:18:87:92:f5:c9:88:9b:9d:be:84:91:7d:dc:1f:6c:
b7:f8:64:77:50:c7:46:af:c3:22:70:80:cb:d9:bf:a7:b6:c3:
bb:66:70:f7:80:cf:7a:1a:9f:a4:38:70:39:47:b1:94:cf:23:
f6:66:c7:9b:2e:46:7b:42:bd:5e:ac:06:ae:d8:d2:38:ba:d3:
6c:99:d0:19:ba:e6:70:3e:53:69:4c:73:d7:89:db:83:e3:4e:
d8:fb:6c:bc:b6:33:ef:4c:57:f4:70:17:de:7a:5b:84:fa:c2:
8a:25:83:ab:22:de:52:18:b7:90:8b:48:6d:e8:c3:cd:52:cd:
bd:88:92:96:99:f8:a2:47:5f:e4:1e:b6:7f:f3:db:4e:c5:72:
2f:5f:02:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org